Archive for November, 2011

iPhone 4S Unlocking. Ultrasn0w to unlock iPhone 4S on iOS 5 / 5.0.1 dropping soon ? Today MuscleNerd, the iPhone Dev-Team’s spokesman has announced some interesting news on his Twitter account. MuscleNerd confirmed that the Dev-team has achieved significant progress on iPhone 4S unlock.

Unfortunately, this hack will be able to unlock iPhone 4S only as it is not compatible with iPhone 4. So we are expecting that MuscleNerd will update ultrasn0w to be able to unlock iPhone 4S. The amazing news that we read between lines that there is no unlock without jailbreak (Cydia). So do you expect that MuscleNerd will release iPhone 4S jailbreak by Christmas ?

ORIGLINK

Ac1dSn0w
Beta 1

Today has been a bit of a happening day for the jailbreaking community. A couple of hours ago, Chronic Dev Team released their Reporter program which sends crash reports to Chronic Dev Team servers (instead of Apple’s) so they can find exploits, and now we’ve received news of yet another jailbreaking tool. It’s called Ac1dSn0w and it jailbreaks iOS 5/iOS 5.0.1 tethered on OS X Snow Leopard and Lion. Check out the step-by-step guide after the jump!

Beta 1 of Ac1dSn0w released for Mac OS X Lion (should also work on Snow Leopard). Ac1dSn0w allows you to jailbreak your iDevice tethered. It also provides features like Tethered Boot, Pwned DFU, and Exit Recovery to get your device out of Recovery Loop.

Supported Devices (iOS5/iOS5.0.1):

iPhone 3Gs
iPhone 4
iPod Touch 4 G
iPad 1

NOTE: If you want more stable and trouble-free jailbreak, we still recommend using iPhone Dev-Team’s Redsn0w for Windows and Mac.

1. Download Ac1dSn0w from HERE

2. After downloading, open it and you’ll see the following screen:

Note:
You can click ‘Show Console’ to see some device related information. It also shows you the current state of your jailbreaking process. The Assistant Panel helps you to put your device into DFU Mod

3. Connect your device with your Mac.

4. Turn your device off.

5. Click ‘Show Assistant’ and follow the onscreen instructions to enter DFU Mode.

6 . Once you’re in DFU Mode just hit the ‘Jailbreak’ Button and wait until it’s done (the device will reboot).

7. Put your device again into DFU Mode (Step 5) and hit the ‘Tethered Boot’ Button.

If you followed the steps correctly, your iOS device will now boot in tethered jailbroken state with Cydia installed. If you wish to restart your device, you will have to go through Step 7 each time you wish to boot into tethered jailbroken state.

For semi-tethered jailbreak, simply install “SemiTether” package from Cydia’s BigBoss repo: semitethered jailbreak | iPhone News, Apps, BigBoss, Guides Jailbreaking to get semi-tethered jailbreak working on your iPhone, iPad, or iPod touch.

Upcoming Features

The current version of Ac1dSn0w is in an early development stage. In the future it will also be able to jailbreak remote devices. This means that you just need to install a server program on any OS (Linux, BSD, Windows) and Ac1dSn0w will jailbreak it on a client machine anywhere in the world. Other upcoming features are:

Upcoming Features

The current version of Ac1dSn0w is in an early development stage. In the future it will also be able to jailbreak remote devices. This means that you just need to install a server program on any OS (Linux, BSD, Windows) and Ac1dSn0w will jailbreak it on a client machine anywhere in the world. Other upcoming features are:

Custom Firmware Creation
iRecovery Remote (you can talk to remote devices and send your own payloads etc

SGH-A887 At&t Unlocked

Posted: November 28, 2011 in Unlocking Service

Reading Phone Info… OK
Model:  SGH-A887
Country Code:  ATT
Cal Date:  2009-11-16
Factory SW:  UCIJ1
Unique Number:  80410000496740
Memory Phone:  K5R2G1GACC(A887)S
Phone S/N:  RVXZ732537
Build:  SBAM6290A-KPVZL-1.2.0075_3S
IMEI:  359657037129503
SW Version:  A887UCIJ1
Searching SysInfo… OK
Reading SysInfo… OK
Please Wait, Calculating Codes… OK (time – 00:00:33)
Freeze code:  51318527
NET lock:  #7465625*638*92753142#

SGH-T339 (T-Mobile) Unlocked

Posted: November 28, 2011 in Unlocking Service

Selected model: T339
Selected com port: COM13
Selected speed port: 921600
Please, connect phone and press shortly power button
Phone Detected
Sending loader1… OK
ARM version 3721
Sending loader2… OK
Flash ID: 00EC2206000100000024
Unlock block
Unlock block
Unlock – ok

Phone Lock Reset
Phone type selected : SPH-W4200
IMEI : 3xxxxx-xx-xxxxxx-x
Bluetooth Addr : 00:21:D1:E7:9D:B7
Phone version : M6280A-KLRZ-4.0.95T
Compilation info : Jun 07 200805:56:12Oct 01 200718:00:00SPH-W420
Phone code : 6055
Connected in NORMAL MODE
Flash ID : ECDC
Flash type : samsung_kal00e00
Flash size : 04800000
Flash pages count : 00009000
Flash page size : 00000800
Flash block size : 00020000
———————————————————-
Reseting phone …
Continue reset … OK
========  Process completed  ========
Unlocking..
For phone connecting do next :
– enter “System info” menu by typing
“4433366368791” in dial window
– select “SIO MODE”
– select “Port Map” menu item
– set “Diag Monitor” to “USB CDC” value
– rest items in this menu set to “NULL DEV”

Connected in NORMAL MODE
Flash ID : ECDC
Flash type : samsung_kal00e00
Flash size : 04800000
Flash pages count : 00009000
Flash page size : 00000800
Flash block size : 00020000
———————————————————-
Unlocking … OK
Restarting phone … OK
========  Process completed  ========

SGH-A237 At&t Unlocked

Posted: November 28, 2011 in Unlocking Service

Selected model: A237
Selected com port: COM13
Selected speed port: 921600
Please, connect phone and press power button 3 seconds
Phone Detected
Use automatic parameters
Phone in TAT MODE
Phone IMEI: 35465103298613
Phone SW: A237UCHG1
Phone BT ADDR: 0026-5F-244117
Phone SN: RPOS824879
Deactivated MSL – TRUE
All Code change to -> 00000000
Unlock – ok

Dear users,

We are glad to inform you that new version of SmartMoto v4.27 is released.
It provides you with such new features:

  1. Direct unlock; Read Unlock Codes; Read User Code; Backup/Restore flash, flex and calibrations; Format FFS operations, for the following models:
    • Motorola*: EX118 / EX119 / EX223 / WX292First in the world!
    • Avio: A1000
    • Chat phone: SN50
    • ZTE: 120F

    * Pay attention! These phone models have problems with network detection after flash/format FFS operations. Due to this reason it is required to backup calibration settings before flash / format ffs operations and to restore them afterwards!

  2. MTK platform phone models based on MCU MT6236 are now supported
  3. Flash chip Toshiba TC58FYM7T8C [98009E:2] is now supported
  4. Important changes made into MTK section of SmartMoto software.
    Those improvements were required to add support of the new phone models.

All feedbacks and backups received from our users were deeply analyzed. Please use latest SmartMoto version for testing and backup reading from not tested in this thread MTK models.

Smart-Clip ON!

Best Regards
GSMServer team

Unlocking:

Model: SGH-A867
CountryCode: ATT
Factory SW: UCHJ3_H
UniqueNumber: 60330000357029
MemoryPhone: KAV00500FM(A867)
IMEI: 35584302771829/9
Phone S/N: R7YS494960
Build: M6290A-KPMZL-1.2.003503T
Reading SysInfo… OK
Calculating… OK
Searching Samsung USB interface…  not found
Unlocking… OK (time – 00:00:04)

Removing phone lock:

earching Samsung USB interface…  detected (COM95)
Model: SGH-A867
SW: A867UCHJ3
IMEI: 35584302771829/9
Reseting… OK (code – 00000000)!

Started Blackberry Code Calculation procedure at 4:55:33 PM
Handling device: [Cyclone Team], [Cyclone Box], [Platform: Classic]
Service Tag: 9FF6EB8EDE0547FE7408F662DE56731B
MEP-2: 67681105

All Done!

 

HTC HD2 T-Mobile Deadboot Revived

Posted: November 15, 2011 in Jtag Services

Open serial port…OK
Connecting to the RIFF Box…OK
Firmware Version: 1.28, JTAG Manager Version: 1.37
Selected Resurrector: [HTC HD2 (Leo)]

Connecting to the dead body…OK
Detected dead body ID: 0x202400E1 – CORRECT!
Set I/O Voltage reads as 2.61V, TCK Frequency is RTCK
Adaptive Clocking RTCK Sampling is: [Sample at 6 MHz]

Resurrection sequence started.
Establish communication with the phone…OK
Initializing internal hardware configuration…OK
Uploading resurrector data into memory…OK
Starting communication with resurrector…OK

Detected an Initialized FLASH1 Chip, ID: 0x00EC/0x55B3 (1024MB)
Flashing the dead body…OK
Resurrection complete!